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DETAILED ACTION 

1. Claims 1-23 are pending in this office action, claims 19-23 are newly added. 

Rejections 

2. The text of those sections of Title 35 t U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

4. Claims 1-23 are rejected under 35 U.S.C. 103(a) as being unpatentable over Kim 
et al. (U.S. Patent No. 5,799,081) in view of Zhang etal. (U.S. Patent No. 6,550,008), 
and further in view of International Telecommunication Union , hereinafter referred to as 
ITU-T . 

Regarding claim 1 . Kim et al. teaches a system for copy protecting information, 
the system comprising: 

• A point of deployment module (fig. 4, ref. num 22); and 

• A set-top box including (fig. 4, ref. num 20); 

• Wherein the set-top box transmits a request message for information (fig. 21 , 
host device transfers EMM, ECM, and CPTC to smart card), 

• The point of deployment module generates a reply message (fig. 21 , smart card 
responds by sending CW), 
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• The reply message including at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 18, 
lines 46-48) and 

• Generating a first key in the point of deployment module, using the at least one 
control information pair (fig. 21 , CW created in deployment module from EMM, 
ECM, and CPTC). 

Kim et al. does not specifically teach the control information pair includes a 
stream identifier, generating a second key in the set-top box, the point of deployment 
module encrypting the information with the first shared key and transmitting the 
encrypted information to the set-top box, and the set-top box decrypting the encrypted 
information with the second shared key when the first and second shared keys match. 

Zhang et al. teaches generating a second key in the set-top box (col. 10, lines 
10-17), the point of deployment module encrypting the information with the first shared 
key and transmitting the encrypted information to the set-top box (col. 10, lines 22-25), 
and the set-top box decrypting the encrypted information with the second shared key 
when the first and second shared keys match (col. 10, lines 25-29). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a second key in the set-top box, the POD 
encrypting the information with the first shared key and transmitting the information to 



Application/Control Number: 09/461 ,984 Page 4 

Art Unit: 2136 " 

the set-top box, and the set-top box decrypting the information when the keys match, as 
taught by Zhang et al. , with the system of Kim et al. It would have been obvious for 
such modifications because shared session keys, used for symmetric key 
cryptosystems, provide authentication of devices as well as keeping data secure. 

Kim et al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T . with the system of Kimet al. as modified by Zhang et al. 
It would have been obvious for such modifications because a stream identifier would 
identify the elementary stream, e.g., data files. This is similar to how ECM contains a 
content identifier to correctly identify the content in which it refers to. The teachings of 
Kim et al. use ECM to identify the content, which can be transferred together with the 
CPTC (see col. 18, lines 61-67 of Kim et al.). 

Regarding claim 2 . Kimet al. teaches a method of copy protecting information 
transmitted between a deployment module and a host device, the method comprising 
the steps of: 
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• Transmitting a request message for the information from the host device to the 
deployment module (fig. 21 , host device transfers EMM, ECM, and CPTC to 
smart card); 

• Transmitting a reply message from the deployment module to the host device 
(fig. 21, smart card responds by sending CW), 

• Wherein the reply message includes at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 18, 
lines 46-48) and; 

• Generating a second shared key at the deployment module, using the at least 
one control information pair and an encryption means (fig. 21, CW created in 
deployment module from EMM, ECM, and CPTC); 

• Decrypting, at the host, the encrypted information (fig. 21 , ref. num 263 uses CW 
to decrypt the information). 

Kim et al. does not specifically teach the control information pair includes a 
stream identifier, encrypting, in the deployment module, the information, transmitting the 
encrypted information from the deployment module to the host, and receiving the 
information at the host when the first and second shared keys match. 

Zhang et al. teaches generating a second key in the set-top box (col. 10, lines 
10-17), the point of deployment module encrypting the information with the first shared 
key and transmitting the encrypted information to the set-top box (col. 10, lines 22-25), 
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and the set-top box decrypting the encrypted information with the second shared key 
when the first and second shared keys match (cot. 10, lines 25-29). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a second key in the set-top box, the POD 
encrypting information with the first shared key and transmitting the information to the 
set-top box, and the set-top box decrypting the information with the second shared keys 
when they match, as taught by Zhang et aL with the system of Kim et al. It would have 
been obvious for such modifications because shared session keys, used for symmetric 
key cryptosystems, provide authentication of devices as well as keeping data secure. 

Kim et al. as modified by Zhang et aL still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the method of Kim et al. as modified by Zhang et al. 
It would have been obvious for such modifications because a stream identifier would 
identify the elementary stream, e.g., data files. This is similar to how ECM contains a 
content identifier to correctly identify the content in which it refers to. The teachings of 
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Kim et al. use ECM to identify the content, which can be transferred together with the 
CPTC (see col. 18, lines 61-67 of Kim et al.). 

Regarding claim 3 . the combination of Kim et al. as modified by Zhang et al./ITU- 
T teaches wherein the deployment module is a point of deployment module (see col. 3, 
line 16 of Zhang et al.). 

Regarding claim 4 . the combination of Kimet al. as modified by Zhang et al./ITU- 
I teaches wherein the host is a set-top box (see col. 1, line 28 of Zhang et al.). 

Regarding claim 5 . the combination of Kimet al. as modified by Zhang et al./lTU- 
T teaches wherein the encryption means includes a hash function (see col. 10, lines 36- 
39 of Zhang etal.). 

Regarding claim 6 . the combination of Kimet al. as modified by Zhang etal./ITU- 
T teaches wherein the encrypted information in an elementary stream of information is 
encrypted with the first shared key (see fig. 4, step num 9 of Zhang et al.). 

Regarding claim 7 . the combination of Kim et al. as modified by Zhang etal./ITU- 
I teaches wherein the stream identifier that is transmitted to the host is incorporated 
with the Packetized Elementary Stream (PES) header of the elementary stream (see 
page xi, section intro. 8.1 of ITU-T). 
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Regarding claim 8 , Kim et al. teaches a deployment module for use with a host 
device, the deployment module comprising: 

• Means for communicating with the host device (fig. 4, ref. num 23 and col. 2, 
lines 54-56); and 

• A processor for (fig. 5, ref. num 39 and col. 3, lines 25-27), 

o In response to a request message for information from the host device, 
generating a reply message to the host device (fig. 21 , host device 
transfers EMM, ECM, and CPTC to smart card in exchange for CW), 

• The reply message including at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 1 8, 
lines 46-48), 

• Generating a first shared key using the at least one control information pair (fig. 
21, CW created in deployment module from EMM, ECM, and CPTC, i.e., the 
control information pair). 

Kimet al. does not specifically teach the control information pair includes a 
stream identifier, the generating of a first key is for a shared key, and encrypting the 
information with the first shared key and transmitting the encrypted information to the 
host device. 
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Zhang et al. teaches the generating of a first key is for a shared key (col. 10, 
lines 10-17), and encrypting the information with the first shared key and transmitting 
the encrypted information to the host device (col. 10, lines 22-25). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a first shared key and encrypting the 
information with the first shared key and transmitting the encrypted information to the 
host device, as taught by Zhang et aL with the system of Kim et al. It would have been 
obvious for such modifications because shared session keys, used for symmetric key 
cryptosystems, provide authentication of devices as well as keeping data secure. 

Kimet al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the module of Kimet al. as modified by Zhang et al. 
It would have been obvious for such modifications because a stream identifier would 
identify the elementary stream, e.g., data files. This is similar to how ECM contains a 
content identifier to correctly identify the content in which it refers to. The teachings of 
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Kim et al. use ECM to identify the content, which can be transferred together with the 
CPTC (see col. 18, lines 61-67 of Kim et al.). 

Regarding claims 9 and 14 , the combination of Kim et al. as modified by Zhang 
et al. /ITU-T teaches wherein the deployment module is selected from the group 
consisting of a point of deployment module, wireless data interface appliance, 
smartcard, personal computer, or Internet interface appliance (see col. 3, line 16 of 
Zhang et al.). 

Regarding claims 10 and 15 , the combination of Kim et al. as modified by Zhang 
et al ./ITU-T teaches wherein the host is a set-top box (see col. 1 , line 28 of Zhang et 
al.). 

Regarding claims 11 and 16 , the combination of Kim et al. as modified by Zhang 
et al. /ITU-T teaches wherein the encrypted information is transmitted to the host device 
using a transport stream, wherein the transport stream includes at least one elementary 
stream (see col. 2, lines 57-59 of Kim et al.). 

Regarding claims 12 and 17 . the combination of Kim et al. as modified by Zhang 
et al ./ITU-T teaches wherein respective ones of the at least one control information 
pairs is associated with respective ones of the at least one elementary streams (see 
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Fig. F7 of ITU-T, an elementary stream is associated with control information pairs 
because each elementary stream requires a stream identifier). 

Regarding claim 13 . Kim et al. teaches a host device for use with a deployment 
module (fig. 7), the host device comprising: 

• Means for communicating with the deployment module (fig. 4, ref. num 23); and 

• A processor for (fig. 4, ref. num 27), 

o Generating a request message for information to the deployment module, 
and in response, receiving a reply message from the deployment module 
(fig. 21, host device transfers EMM, ECM, and CPTC to smart card in 
exchange for CW), 

• Wherein the reply message including at least one control information pair, 

o Each pair having copy control information and a stream identifier (col. 1 8, 
lines 46-48), 

• Decrypting encrypted information, received from the deployment module, with the 
second shared key (fig. 21, ref. num 263 uses CW to decrypt the information). 

Kimet al. does not specifically teach the control information pair includes a 
stream identifier, generating a second shared key using the at least one control 
information pair, and receiving the information when the second shared key matches a 
first shared key generated in the deployment module. 
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Zhang et al. teaches generating a second key in the set-top box (col. 10, lines 
10-17), and receiving the information when the second shared key matches a first 
shared key generated in the deployment module (col. 10, lines 25-29). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a second key in the set-top box and 
receiving the information when the shared keys match, as taught by Zhang et al. . with 
the system of Kimet al. It would have been obvious for such modifications because 
shared session keys, used for symmetric key cryptosystems, provide authentication of 
devices as well as keeping data secure. 

Kimetal. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T , with the module of Kimet al. as modified by Zhang et al. 
It would have been obvious for such modifications because a stream identifier would 
identify the elementary stream, e.g., data files. This is similar to how ECM contains a 
content identifier to correctly identify the content in which it refers to. The teachings of 
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Kim et al. use ECM to identify the content, which can be transferred together with the 
CPTC (see col. 18, lines 61-67 of Kim et al.). 

Regarding claim 18 . Kim et al. teaches an article of manufacture comprising a 
computer readable medium in which resides a computer program, said article being part 
of a deployment module for use with a host device, said program comprising: 

• Instruction means for communicating with the host device (fig. 4, ref. num 23 and 
col. 2, lines 54-56); and 

• Instructions for, in response to a request for information from the host device, 
generating a reply message to the host device (fig. 21 , host device transfers 
EMM, ECM, and CPTC to smart card in exchange for CW), • 

• The reply message including at least one control information pair, each pair 
having copy control information and a stream identifier (col. 18, lines 46-48), 

• Generating a first shared key using the at least one control information pair (fig. 
21, CW created in deployment module from EMM, ECM, and CPTC, i.e., the 
control information pair). 

Kim etal. does not specifically teach the control information pair includes a 
stream identifier, the generating of a first key is for a shared key, and encrypting the 
information with the first shared key and transmitting the encrypted information to the 
host device. 
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Zhang et al. teaches the generating of a first key is for a shared key (col. 10, 
lines 10-17), and encrypting the information with the first shared key and transmitting 
the encrypted information to the host device (col. 10, lines 22-25). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a first shared key and encrypting the 
information with the first shared key and transmitting the encrypted information to the 
host device, as taught by Zhang et al. . with the system of Kim et al. It would have been 
obvious for such modifications because shared session keys, used for symmetric key 
cryptosystems, provide authentication of devices as well as keeping data secure. 

Kim et al. as modified by Zhang et al. still does not teach the control information 
pair includes a stream identifier. 

ITU-T teaches the control information pair includes a stream identifier (fig. F.7). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine the control information pair including a stream 
identifier, as taught by ITU-T . with the module of Kim et al. as modified by Zhang et al. 
It would have been obvious for such modifications because a stream identifier would 
identify the elementary stream, e.g., data files. This is similar to how ECM contains a 
content identifier to correctly identify the content in which it refers to. The teachings of 
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Kim et al. use ECM to identify the content, which can be transferred together with the 
CPTC (see col. 18, lines 61-67 of Kim et al.). 

Regarding claim 19 . the combination of Kim et al. as modified by Zhang et 
al ./ITU-T teaches wherein to use the at least one control information pair in the 
generating of said second key the set-top box receives a transmission of said at least 
one control information pair, the respective copy control information of said at least one 
control information pair not being encrypted for the transmission (see col. 19, lines 63- 
67 of Kim et al., it would stand to reason that the control information is unencrypted so 
that it can be utilized by the host quickly). 

Regarding claim 20 . the combination of Kim et al. as modified bv Zhang et 
al./ITU-T teaches wherein step b) is executed without encrypting said copy control 
information of said at least one control information pair (see col. 19, lines 63-67 of Kim 
et al.). 

Regarding claim 21 . the combination of Kim et al. as modified by Zhang et 
al. /ITU-T teaches wherein said copy control information of said at least one control 
information pair in the reply message is unencrypted upon transmission to the host 
device (see 19, lines 63-67 of Kim et al.). 
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Regarding claim 22 , the combination of Kim et al. as modified by Zhang et 
al. /ITU-T teaches wherein the information to be encrypted comprises content 
information (see col. 10, lines 22»25 of Zhang et al.). 

Regarding claim 23 , the combination of Kim et al. as modified bv Zhang et 
al. /ITU-T teaches wherein said content information comprises content information of an 
elementary stream, said stream identifier being an identifier of an elementary stream 
(see fig. 4, step num 9 of Zhang et al. and page xi, section intra. 8.1 of ITU-T). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon Hoffman whose telephone number is 571-272- 
3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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